v1.0.6: NTLM hash support
This release introduces support for NTLM hashes in the PwnedPassAPI as announced by Troy Hunt.
To be able to generate NTLM hashes, we needed the ability to calculate MD4 hashes, as NTLM basically is calculated like this: MD4(UTF-16LE(pw))
. For this we ported the official golang.org/x/crypto/md4 package, so we can still claim that the module "only depends on Go stdlib".
A new Client
option has been introduced: WithPwnedNTLMHash
. If the client is initalized with this option, all generic methods (ListHashesPassword
and CheckPassword
) will operate on NTLM hashes.
Additionally, there are now equivalent methods for checking passwords and listing hashes for NTLM: CheckNTLM
and ListHashesNTLM
What's Changed
Full Changelog: v1.0.5...v1.0.6